Ad-Hoc Proxy Authentication for Parallel Batch Processing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Batch processing tasks in cloud environments face inefficiencies due to the overhead caused by repeated authentication with third-party services, which slows down overall throughput.

Innovation Solution

Implementing an ad-hoc proxy that performs authentication on behalf of job instances, establishing a single authenticated communication channel with the third-party service, allowing jobs to operate in parallel without individual authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each job instance authenticates with the third-party service directly, then authentication security is maintained, but authentication overhead increases and throughput decreases

Engineering Contradiction:
Improveauthentication securityVSAvoidbatch processing throughput
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent introduces a proxy as an intermediary component that sits between the batch processing job instances and the third-party service. The proxy establishes a single authenticated communication channel with the third-party service on behalf of all job instances, eliminating the need for each job to authenticate individually. This mediator approach maintains security through centralized authentication while enabling parallel job execution without authentication overhead.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple authenticated communication channels are established for parallel jobs, then each job can access the service independently, but authentication overhead slows down overall throughput

Engineering Contradiction:
Improveparallel job execution capabilityVSAvoidauthentication time overhead
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent merges multiple authentication operations into a single authentication performed by the proxy. Instead of establishing separate authenticated communication channels for each parallel job instance, the proxy consolidates authentication into one operation and shares the resulting authenticated channel across all jobs. This combining approach preserves parallel job execution capability while eliminating redundant authentication time overhead.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If authentication is performed for each job instance, then service access control is enforced, but the overhead creates bottlenecks in batch processing

Engineering Contradiction:
Improveservice access controlVSAvoiddata access speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent implements preliminary authentication by the proxy before job instances access the third-party service. The proxy performs the authentication action in advance, establishing an authenticated communication channel that subsequent jobs can utilize without repeating the authentication process. This preliminary action ensures service access control is enforced while eliminating authentication bottlenecks during actual data access operations.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12547442B2Ad-hoc proxy for batch processing task
Publication Date: 2026.02.10 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12547442B2 patent drawing
  • US12547442B2 patent drawing
  • US12547442B2 patent drawing

AI summary

Provided is an ad-hoc proxy for a batch processing task within a cloud environment. The proxy may reduce overhead that results from authentication between a jobs of the processing task and a third-party service. An example operation may include one or more of dividing a processing task for a target service into a plurality of jobs that each access data from the target service, establishing an authenticated communication channel between one or more proxies on a host platform and the target service, executing, via the one or more proxies, the plurality of jobs in parallel and accessing data from the target service via the authenticated communication channel established between the one or more proxies and the target service, and returning results of the execution to the plurality of jobs.